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f 5 >-Hf ? ^ 3 >s*^»^ 7 ^ 3 y*HtfT 
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c?) 1 oXfi^WfflAWVIISr^^T-^ f: , lulBffl 
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*^ffiv » f 5 y^f"^ y 3 y ^ nff T-# & X 3 fc-rs^r 
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.a .y ^y^MicSrffid lf*il 1 IB««. fflAliS'J^- F 
<0Bsr«ffl«3&* F 9 >-1f ^ ^ 3 >-ilg*SrffiV ^ F 9 >"f ^ 
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^tm-h Xf -y TOW- H/»&3&»^> 
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[ n&a 1 1 ] fflAtisij* - f * ev «g« f 5 y-r 

7is3>ZMm-t& loXt4«ifc7*g-:3-F r 7-F£, 

bu T7- f tc § tiett-r 5 x t- -y r Sr -t h If 
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[0008] ififi^ffl^y-m^xy- Fa, ignrffiffl 

mK«H) «Bfl«jS*«*>-^r-^**t;. ^«4H«a 
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[0009] ^Jg^HSfiCTTIi, KTWAiMfl^- F£ 
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F&tW y fcWJ&aWRTflr^ffc LT8r^fc> « <7- 
F/*&£Mr4Xx>yTt , :^f^«7-K 

[0010] {IAiiSiJ*-F^M.^«ffl^F7>'-f 

a ^5yt7-/ 3 V £Hfr -t 4 i i: 5&*T 
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3 0 . tuiaSffi^^MAHS'J^- KOfirf- 
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SO*- F Srffit * F 9 y-T 9 is 3 X&UfM-S 4 a fcttffl 
#^IS^T$tia d t £ & £ k I) . 
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F y j {4. 15 y-if ? >- 3 >«*-?f 4 
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y^fAli . ^^mfflA^S'J* - FW 1 

saifif tc»»s-frfc«aR^)»ff f 5 y-f ^ ^ 3 ys*£ 

i> £^&mf^mtk&mmm^tt<DMm9mx 

£3 1 < izm Ltz i ««ittc =t 0 i7>t7 3 ys*o 
s^*i4 1 ^ximm^mi^m^^m&zmm-h 

ZtifiX%%>» 

[0013] *imnm&8mz ztax. &tt< 1 1> 1 
r><r> v v y if'/ 7 3 yS*Sr/r L f 7 y-f? ^ a y 
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TV^IiEHJ«7ti:i(iVN°X*r-F. iH&g$&ffiL 
* - F , ^f&ffiBJ^- h\ -tr^f i'Jf -f?'J 7? yxtt 
- F . SAIiSiJ*- F . HSIjEEi*- HXiiaffiWS* 
tftc0k#x.(?>fL4„ 

[ 0 0 1 5 ] El 1 A^fflA^'J*- F (10) te>m% 
f&^£Chi. *-F (10)l± > «*(14) Jklf^ 
^0 (16) ^^o*frgE^ (12) S«iT^S. RB 
gfS^fttli^i^t'J ( 1 6) 54. J;<*a^ixT 
^ 4 ± a fc L X * - F fcjfift L X(4^-co tfi taiLt « 
iSM^lt^ fct«HR<^)«*, ^(4 P R O Mco 4 a 3rfl;^ 
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[0016] 121 Blz&\iX*Wmz£fiifmXWiWM 
— F (10)^t'J ( 1 6 ) il ffiffl#O^F«0SSg 
X'^tthty&mm&cr^^frbtk-f&mft ( 2 0 

a ) ^m^m^mm^zimcn o«7-kj (20) 
z\commxmo mmx^^ 

mm*-^mmim%?tm%&xtm.~t& a t izx. 
^m-^\,zm^htLh\><n(nz\hx°foh<, m m^mmm 
vwsxv-w&tt ( 2 0 a ) it. mxmm- f 

(10) COMi^^ (18) O-f' ^ ; J^MV<— zss > 
imirt'fJitffrVv FX F <J-^X'$>&« 
[0017] XM 1 BtCTjrf 4 3 V- F (20) 

J: 0 %mmZft^Mtt (20b) Sr^TV^„ Zcom 
fgti&Wco t, & -> T 1> ^ < X i> J; n . § ^ v 
(20)11 loX(«ICS0=J-K>7-K£»Og|S 

fl iSS Btt^AlS^f^ j££ BttT-^X«&£g 

=5^*2: byyf^i/g^ XJi 1 ■oXtiSSoffi?) <r 
COX o «i F 5 y-f 7 y 3 y,XHl -?X{±«i*o 

ffiw^ cox o ^mm? f z> y*f? >- a y £ tm-tz o ^° 

X7-K(20)llIlBCiLtl «HXti:«l» 

mcom^com^co^-^m^ (20a), (20b>x 
a (2 0c) mitc\fimco^m£^A,x'i> ^coit^-h 

hAsXfoh* 

[0018] Xt,m 1 B ^Z7jk~f~i. o (CfliA^iJ^- F 
(10) CO^^V (16) (22) £-^XXV> 

So S£ (2 2) (i, =5:*3l¥L<f^-rs =fcdt, ^ 

fflttBf^-^j OltS^fflAfflll^ffi^^xy-F (2 

o)^i^r?-&. f^maHfrtsr^j ji 2^ 

ISO t coxfo <0 ( Xii5J«Cr < t t $t^HWr#^X ^« 
^) , X-^«(ifflAffl^=5r^*>f^W^i>^-CS. 

[0019] 12 £J1 Lfc =t 5 =QrS&T«A 



hs'j#-f do) *mtth*wmm&&m&-? 
n— f-^r— hisi/t**. x fv7 oo) xn%- 

i<0-r-^(i^-K*i2*«^3t*-ftt». Xf7 7 (3 
2) -cld^Jt, ^coffi^iAWx-^Xfi^-H^IS 

^ra s i ft^co^gfltDif a & ®a l t hi b xm^ 

[00 20] Xf77 ( 34 ) •C'iiiW^y-FSrFJt 
?«xf -/ 711 ^ < tB=Tfiffl«<0T <r v?Mm% 

>y b X b U -Ac?)S§ SrMH-r S «(C^ST" 6 . 
1 CTt LTW®?)— *-[pJMISF{4. D E S^ffiXttr?"- 
;lKV7t, S^WJ^Xh (Goldwasse 
r, Mical i & Rivest) COjjMfrM%t> 
flh X 0 &S$C<7)&*tI<7VVy yy/Il ( h a s h i n 
g function)«3 IbCOHMcO 1 OX(41SI4W 
SHfrCfcV*. l£{4MicF<4, 

vxxr-yT ( 34 ) *Mxmzmm-&m.wmmx°i> 
xw zcommrmm. ( 1 

6 ) OWfflTS SISIi^M 4 O-HJ-Cffll^fr&Cfltffl-T 

4. 

[00 2 1 ] Xfv7 (36) X'tettmiZ, aiM^T 
(Pi • P 2 ) X f-r-f^/U**j SrfiVH^^S 

mmxteP ! at/p 2 <4i:^^s*a^x^ o . ^ra 

Wt#^C^)«WH. Pi • P 2 t*U^HMlM** 
t». Xf77 (38) "Cfcfcfc&tfeti, >UV-H 

(38) Xt4. 77- F (10) ^^-COt-'-^SO^F^ 
*§il-Ct>«@gtffifflnTffit=-rS. Xf77(4 0) X 
l±»^«7- FA*^i±H«WtH 1 B t^-TJ; a 
LTfflAliSiJ^- FicK'ff Sixl. . 

[00 22] H2fcttPfflBfc^LT*V^, *-F^f 

¥mps\ ^zm%&&mmm^ttcrMtt^-$:m 
m*tzM&& i mxteimmeomisitzA-F ( 1 o > tc 

l-oXii^lcco-rX ^'^/PS^^-rX V-9Mzm%xfh 

co\m^xhh. z\coMSz\coi}~]m. 

x*-F (-T&^SIE) fcLT«IM-iif:3e«rS 

- f srUf^raBrcm -^k uxfis* a** m^k 
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[00 2 3] 03 iZli^BflcDirM^? J ~J?)Vm%x>V 

x o izmimmmm^^i^mmxh <o , (p, - p 
mmm.Pi m/p 2 ux^-v-T (4 2) x\ mw^xv 

=Jx.nM£^t?zb$lZ^ #£>tlftffi±Q mod M 
M'+2Q mod Umtztz 1 O^ffij^'SiMcOTTT 

mmz%& i d csstt-ft . ms&T * vtivm&v 
-^ynmmimiiHLt lt . m= p t ■ p 2 cvm%m 

cotmtbX trtif L v * fc v ^ i b < . 
[ 0 0 2 4 ] X\M 3 fcijr*- J: d {ZXf -vT (44) T^ 
t^U7- KQ(;HS:± 1 modMSy+2 mod 

Mc7)#iai5[^s-rs 0 ;«^-fyjWf-yr (4 

6) Xf77 (4 6) TliiOiatLTW^ 

ilft#ffi±Q mod MSy'±2Q mod M£|f 
ff LT SMcoTT^SBj? £ tiLWOfet ft » i Offi 2: 

7(48) Tftff Ltf^ 

[00 25] P*HJcl^LT£VvWIAJfl«iffiK<Z>* 
fl>8W*i: (Pi. P 2 . Ps. ■ ■ - PJ «r*tK9 
f ^ ^T#> ft . itHRRRU El 4 L fc/t— f - V C« 
-5tim«^J:l\ Xf '/7 (35) Ti±n-t°-y 
bOSlJ£Xl££j£^ft. KyHRnJi, MtBaRt* 

Wfc-T 4 £ i: tftrf** L < =5r ft ± 3 < "Tft 

(^hi.ii'2 5 0e-yh) j&Btf&S. Xf'/7 ( 3 
7 ) T(4X ! £ BrJ&OtfK: t X. if 3 mod 8 (CHR 
-tZmzim-tZ. Xfy7(3 9) TliXj #<XR 

«rc*wf, x t =p, «y on'-?- 
yiixt-y7 (4i) (cm< . x 1 ^Mrcfcimtr. 

Xj [iXf77 (4 3) -emftZtl (Xj =Xj + 8£ 
-te>y n-tft£L^± 0 ) . ;l~fy(iXf7 7 (39) 
tcHft, Pi £SI5£-fft, )V~^-V\tX^f^T (4 5 ) 
tStt* S'J<7) n - tf -y hgUfcX 2 Sr^Jt-r-g, . Xf -y 7 
(47) T(4X 2 {43? 2 (Vm&Mfc. b£l$7 mod 
8 tc-Setft i 3 t*4H- ft .Xr/7(4 9) T«4 

■3. satcfciitrn^f-^tt. x 2 =p 2 j-t7hta 

£ ktJ: Oxf v7 (51) taR< . x 2 jWHKrfcW 

JUT. X 2 &Xf7 7 (53) TiftfrL (X 2 =X 2 + 
8^-b7ftS; fcfciO) . ^-fyliXfy7 (4 
9 ) IZM&, P 2 *38©r* fc^BHUMSxxvr ( 5 
5) TP! ■ P 2 |cSPt< 5 Sr*J:3fcHs-y b-fft. 

[0026] »fe*ttJW*«fcyesFTS s«tf*B*fc: 

Pi $.t>*P 2 £fcj&*34U*. S6t£j}!l£>& 



£JI#(7ft££#T*S&^TlIAfflli (Pi ■ P 2 > £ 
1 o^S**^SiJOS*(-lB^ ft .1 £ #T S ft . £ 

h«3rj*XM:W t'y(Rebin) co^mMi. 

HUtfJS^JESSjfiSli:^** 1 . H3Wk-^-yii£tL 
£<BKfcU2r^. b'ntSrSlzi* rg^j ft 

<il<5:ft. iajteo^-K^S&fr LidtLTt, 
7- H ^ ?ft/U7- H Q|*i(;a 7 y itl (has 
h ) «te-*toB«F0H£fflfcJ: 19 § A,£»3tCc£rft. 
;«i3tU, fti&gtf t' -5 (c*^ LT CtOlAf- 
■9\,zM~$~h^%i$:%totd'zb LT t . &mMteA-V£. 

mjjmizMfcr-**. v<F>T9»/9*mjLhz\b tmm± 

T#3r<3rft. 

[00 27 ] E15W4. H2^rv»Lia3<50;P— 
-^T^^fi^fflAliS'J^-H (10) <vm*JZti%:^ 
&m$:W±-t&1iM%:J]&cD-7u-^—hijjkLXfo 
ft . Xf 77 (50) T<4fIAfi3iJ*- K £ b 5 v^'^ 
s^ay«*fc:*JV^T*tt]R4. Xf»/7 (52) T14?? 
mV U7-K SrH-f-LT ^fi^ U7-F & 
flS^^^RSc-Tft. *S"ffii4. Sfl^°XV-KS.V^I 
"3 * =fc < »^*Ut*S£t:«-3 TlTiE-rft X-f -y 
7(54) 2r#0<7)#'j:U 0 X^'y7° (56) Tii. % 

moMx-rn d m tm^mm. f T^m^ « y - h 

L T ^AtlMAmSM - H ft W KQR 

[0028] <!«;i^'ic?);l-fyliXf77 (58) t 
SSSif^ f &iH J T'ioft £ i: SrWB-r ft . L < 

mm^^m^xv- fq e ^4.^-rft - 1 ^t# ft 

M(ixf77 (60) (att*»i»«3&«»3'Cft*fc 
^3^*±-Tft<, Xfy7(6 2) T14. Sftv\°A7 
-KiOx-^^^S^^^-Tft. £^0**{4. 

§ ft 1 1 W n°x «7 - H **aRT* - H U.m^'r 
i i?5> 7HtSnfe^**^TV^*urB#rft4 . Xf 
77 (62) (d^^«B*«ff*»*i.Tv^lHfcil«*-t 
<*t=S^T& ft J: a l:xf77 (58). (60) tM 
?|J CHit ft z\ b * i- T ^ ft cr>\± i» % h k,X~fo ft . m 5 tc 
Sti5txf77 (64) T{±*^r^ih^yHf^^ 
3 >JB*<?5-r -f X71/^ (cB«*7nX{4J^^(4^tOW 
S^-T ft . UCV VC £ Ox 4 X 7 !✓ >f (4ffi*^0J*f^# 
ifix^r-v7° (66) T«IISLT^-mS*^!^§^ 
h5>-f?ya ^SrSISIfcMf-r ft . 
[00 29 ] H2co^r&(cJ; O^lRtfcfflAWM^-K 

tf&mmmMZiOmb -t& v t mmx-z ft 



: ( 7 ) 00 0- 358026 (P2000-358026A) 



7°Wx?y->- {zm^t h Z.hifiX'% h . f->t If 5ft 

Lffijyt£»r4 £ 1 36*r* h . 
[0030] H6 Ct4. H3 COffil^T" 4 WJVmMJV 

(68) SAiifflAftm-F^o 

^1-^X7— HQs fc®Rffi± 1 mod 2 
mod M<?5*Eaft*3IW4. 4*ft(4. «S»* 

M^fcLTY^SiMciOx-r-yT* (7 0) 
t«&ftX*£"$*4. X-r-yT (72) 7ttXi«±Q 
mod MX!i±2Qmod M^V vf^M^LV^ 
if a frZfetbhi. o \zfX F Zfro . WLWirSlzWl- 
-f>-ttXf77 (74) SBf«4iS3Tft 
5 t ^ ^ f §^ £ ^-f So X # i ix^<7) 4 -5«H1« V vf 

[003 1 ] *36^tf5*ffiatf ^-f-Ad, Wife^Hfls 
^'SVH^=5rl>Hf^^c7)iiM*ffiv^- F£IMt L i 

) it Zcoffif^&fr hCDft— F h tm-?& ZtZ 

imt-tt ^mm^^-r y * ta-^-r s eo«4 
t^«sf^; oss*^ - f i* t fttc^tf 

H-^^g^-iCtt**- F tflrfft LX & i^. 
J: a =5r v-Xr-AJill 7 (Ctk t T § o 

[oo32]07 x-nm^rnxmu- foi oxhi 

««a4OT^#K^LWR«»R«* (76a). 

■ ■ ■ (76n) hw-jt**. mL<n&mt^m$, 
itwmx ^tixirmm-t^ . mzvtzi. o^zz^x -3^ 

F7yf? >- 3 >S* (78a). • • ■ (78 
n) fc8r*ffcUCA*l.«U. 

[0 0 33] 07cO^X-rA(i, /^XiK- F1S3, HK 

F is x -r Acofgff; tSfcot fcfc&nii . * to^ftt- 4 ffi 
<?M?M& (SfE£-#t?) tfgfiE-f &cDtc#.— cDF^V 
[00 34] Afg^^SlVVXT-A^'eEfftT)^- H 

vx.TRWy b Tj^Tx-^uizmffiT^ h z m 



— ? (so) t^^u-r- ^ yyrny^ARuubmy 

o^ASaBtW^IMWS^^U-r^^ (82) fc 
tfllitv^*. k (84) sy'f ^T-l/^ 

(8 6) ^id^A^-fV^xa^ai^xV^xti. 

fiHUfc* T77) y- YTVA -y 7°X(4 V7h 

f?y 3 >S* (78) 7^P7D-t7t (8 

8 ) , ttitwt'j (90) ftwsa^Am*^^ 

X^ t itf^- h'MK On (92). #-iK- F ( 9 
4 ) a.t/'r -fXTW (96) Srfix.-5>«* S J;^ 0 
[00 3 5] ffrl&c7)lIHJ!<i:h < Cffl/JKW- Hffl^ff 

B/u-f-y^x. fflAx-^SKsii*- f smztm-t 

h W&t < X Mtmi- -t wVX'&thiS&te 

^ffffi* (76b) M>7yf7y 3 yS* (78 
a ) ffMizWM^y^V (10 0) tztUi^f-k* 

[0036] mmzi!itz->xt±m2<7)&jrmx7->y7° 

{S. x-r-z 7° (40) Srl&g^^ft D^ffifl^^ 
(10 0) fci "Jflr*^«»7- F/S«2rf5St-^X 

f-vT&mihc\t*m^xm?.L?zcr>tmtT$>&, 

Xl5(?)lf^-f>mf77 (50) SBftSftO 
fc. iifl^-Y*^ (100) Oft^^i-Sffi^^F? 

if. m^xwcoxr- •yy°<7)m<9i / z$£-?xmm-t& X o 

lzLxijX^\ z.c^XoizLX^xy-b&vm&Z-i; 

A.xmm^-^mmmwM- ft ^ < xmrn*-* 
wxhh^^z. mxm^zn u«7- v/m&mk 

[00 37 ] jaj^ffti!H**<!5SOfcWfcov^S(Wfc:K 

It^M t ff d i t **r & 4 <0I± t ^^-C* 6 . 
[Hffi^ffi^l^] 

[HI ] A(jffisrSft.fcM8I*-|«ffiffl#WW*ftMftt 
<0B«SSo*aMBIHAI!K!lJ!r- F« 1 ^SSCToJftHW 

fR L^n°X "7— F S-iSt"^ FcO®^^C0gP^£7) 

[H2 ] Hl^idittsraAMWiWr-Ktffttfti* 
aSBB^Wjtft^rffi^^n— f-^r- FT'* 4 . 
[H3] m2cof^ > ? ^;i-S^;F-^y<73pffl ; 5r7a- 

[04 ] fflAfflu (Pi ■ p 2 > o«Hiaasfei»&ts 

f - y <7) 7 a— ^-v — F Tfo h . 
[ H 5 ] H 3 O^ffi t ± 0 »ff S fufcH 1 A cOHAUSO 
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10 fEAIlS'J^-K 


9 0 




1 2 #ft;g&fr 


9 2 




16 ^^rU 


9 6 




2 0 A°X7-F 
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[02] 



[H3] 



12 




_--otioiioo*- -10101310010001 ■■■ onoonor 

-»»0110110110110t10Q..- 



27 




68 



[06] 

{ + L, ±21 
I mod Mtm'Z 



70^ 

72. 



I 



Xfi± Q R mod MXtt -- 2 Q, 
mod Mc^V^i^ii^Ll^: 



74- 




30- 

32- 
34 
36 

38- 
40- 



X 



T 
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46^_ 



4*- 



{± 1, ±2| mod M 

I 



[05] 



-50 
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-60 



-62 



^64 



-66 



•36 



[H4] 
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[07] 



43 



I 

3 mod $r^£ 



X.-X. + 3 



-37 




—41 



X 3 fr£hltN~5 — 45 



T 



7 mod 8\C—&r$Z 
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B4 
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